Select to view content in your preferred language

Security Fix - Sensitive form field has not disabled autocomplete

32
0
10 hours ago
Status: Open
DEWright_CA
Frequent Contributor

When entering various forms/fields in the REST endpoints via other ArcGIS Server or ArcGIS Portal the ability to store for autocomplete values is flagged as a serious potential compromise.

If the browser is used in a shared computing environment where more than one person may use the browser then "autocomplete" values may be submitted by an unauthorized user.

Tags (1)